Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa
File:                     2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa (raw, json)
Hash identifier:          t0sR0+Y+dC9IB99I9YwiagAC76My/PJPQ1hkpKKRbOM=
Subject key identifier:   ED:8A:75:38:F1:7F:FC:C6:EE:D9:14:60:78:53:D2:67:6D:AA:E1:28
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F4984B24D9C0E5C61CCABF140
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54113
IP address blocks:        157.5.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:b2:4d:9c:0e:5c:61:cc:ab:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cc829613-7eb2-4bc1-a5ab-cc5290d65c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:77:07:4e:cd:8d:cd:bd:33:6e:be:4d:fb:be:
                    0f:b9:40:33:01:44:7f:83:3c:cf:a4:a7:80:09:cf:
                    92:e0:fb:4c:45:49:cd:f3:86:95:de:95:32:eb:bb:
                    10:de:69:49:37:ce:54:6c:58:7a:83:a2:d9:7c:96:
                    94:9b:2f:77:51:45:71:be:49:ff:97:42:21:f7:73:
                    41:61:b3:be:05:bc:ce:5d:9c:6b:25:fa:3d:db:77:
                    c1:32:aa:b9:09:35:dd:63:20:60:80:a3:cc:e5:b5:
                    43:71:15:c3:94:68:04:b6:0d:59:82:8b:31:d2:b9:
                    c8:3d:76:94:10:88:50:57:72:ff:19:5c:0b:03:76:
                    c2:bf:b4:43:46:51:0b:71:da:b5:02:5d:44:41:82:
                    0a:e4:1f:7a:14:b3:ac:c7:62:cd:ac:b2:d4:9e:80:
                    2b:62:8a:8a:f9:36:0b:a1:9f:fa:18:ec:a7:af:37:
                    b3:3c:e7:8d:3f:73:a1:54:d6:30:4c:fd:01:13:09:
                    65:a7:4e:15:ed:5c:d9:99:07:86:85:39:db:7f:06:
                    9a:f2:59:1b:f7:f8:35:ed:27:ce:6a:ab:63:a2:02:
                    be:7a:7c:d2:f2:4e:1f:11:a5:ee:44:de:e9:a1:7b:
                    c9:7b:21:a5:03:94:4d:77:2d:64:71:51:de:fe:99:
                    65:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8A:75:38:F1:7F:FC:C6:EE:D9:14:60:78:53:D2:67:6D:AA:E1:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:63:fb:a3:88:41:22:0f:25:e2:ab:ad:29:2a:99:d6:0e:b5:
         68:46:fb:6c:f7:7e:25:91:be:ec:4e:2b:ea:56:76:1f:95:70:
         5c:10:06:d7:96:4e:3e:75:d2:be:b4:32:3e:59:6d:04:95:5e:
         5d:73:e7:11:0b:7e:08:d6:05:64:72:82:80:73:68:b1:02:23:
         08:81:e3:d7:50:4e:80:44:b5:10:a7:b0:9b:3a:07:ca:e5:0b:
         5b:15:88:9b:5c:f5:47:d8:fa:f3:d1:c9:14:20:33:75:7e:16:
         a6:33:49:2d:82:8d:68:d1:9b:96:b6:82:bc:cb:c5:d6:1f:44:
         c8:4b:61:c6:08:ea:3b:ba:f8:7b:53:1b:37:e1:3d:04:68:c8:
         32:5e:66:5c:41:3e:ed:6b:46:a8:1e:0d:a7:b3:5e:5e:4d:a2:
         6c:24:ce:0a:6e:39:3a:d6:96:7a:28:10:cf:2d:48:f4:3a:f4:
         ba:bd:82:45:c2:02:92:70:e8:80:89:1b:a3:e1:b8:79:9d:01:
         00:bc:04:ca:1d:11:b8:ca:8e:ee:0d:2c:b0:95:91:32:a4:1b:
         df:9a:37:8b:ad:26:23:05:18:f9:42:2f:f1:88:55:76:ae:5a:
         00:06:ea:76:01:2c:5f:71:70:1e:f3:81:be:95:1a:31:5e:96:
         54:33:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:58:53 2026 by rpki-client